Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
File: YPa89uKxCboqFKc7l1rZVEhLS6U.mft (raw, json)
Hash identifier: +bIwHztik4YbrnzLjVNkoQ6h8ja9RnzXKsO2kIyNDUE=
Subject key identifier: 8E:CC:FE:F4:4A:E6:F4:D6:0F:C8:DD:95:E4:1A:66:6F:54:56:9D:82
Authority key identifier: 60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5
Certificate issuer: /CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
Certificate serial: 0194BC72DCBBB5A4BDFA8FF6AEE5DCE78756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
Manifest number: 08AC
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: YPa89uKxCboqFKc7l1rZVEhLS6U.crl (hash: EwFwv4sRQnV1Ei1gtx63hzBk7owtCCORhbiFDyEAA38=)
2: oNp64lcp-PwrYsQaBw1j30tzyNw.roa (hash: FzeHCqPb/tC2Vmdnn3r7gfGFiDclam5dSTVPZrLAWO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dc:bb:b5:a4:bd:fa:8f:f6:ae:e5:dc:e7:87:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=8eccfef44ae6f4d60fc8dd95e41a666f54569d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a4:f1:78:89:e0:66:58:8a:b7:68:3c:03:4f:
b9:b1:9a:25:cd:65:e3:ce:c5:3d:63:c3:43:9a:d1:
ca:84:34:54:14:33:ae:52:f4:18:e5:f8:c3:90:fb:
75:97:a8:a6:53:50:77:28:f7:3c:f2:ff:82:b3:6b:
56:fe:be:70:c2:08:f7:53:b0:86:fa:20:fc:21:97:
95:05:dd:8e:74:05:6f:48:31:1d:a4:6d:6b:09:06:
7f:f1:a6:f8:d4:03:d9:7a:e9:9c:ce:07:61:13:ad:
d8:a2:06:27:04:22:b0:62:14:90:93:4e:4c:70:7b:
9c:33:b5:a6:dc:0c:2f:4c:2a:f3:8e:78:01:d6:ca:
a4:b4:ff:19:5b:42:8b:73:f5:4c:89:56:d5:ce:0b:
3d:95:f7:cd:d9:9c:86:aa:99:72:d0:49:63:46:51:
00:73:7c:5b:5e:58:0a:ed:a1:e9:d4:eb:6f:0d:60:
a8:82:af:84:8d:2c:79:96:d5:96:0e:47:6a:4a:7e:
af:e1:88:69:4c:97:72:92:6d:7d:b8:d0:3f:6d:93:
88:f1:de:a5:36:7b:c3:0c:ca:8c:01:65:b2:7b:d0:
80:0f:54:ab:25:1c:51:f3:bd:7a:3c:d1:04:e4:b8:
f6:89:2b:2d:c7:97:5c:d5:6a:80:3d:e2:10:3b:79:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CC:FE:F4:4A:E6:F4:D6:0F:C8:DD:95:E4:1A:66:6F:54:56:9D:82
X509v3 Authority Key Identifier:
keyid:60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:24:26:53:76:05:f5:5c:f0:13:84:05:12:48:55:a1:a7:25:
8d:d2:f3:33:fd:7f:9b:42:fb:14:6b:2a:67:6e:08:72:a6:eb:
d7:dc:e1:3e:07:f1:52:69:3c:37:4f:23:09:b1:ab:47:35:17:
05:08:7a:5a:df:5e:fc:fb:66:da:3e:d6:74:81:be:0e:d1:27:
96:fd:69:c6:50:b5:2f:d3:38:c2:50:9c:08:a6:30:68:c5:19:
e6:7e:ba:b0:67:d8:24:71:da:7e:78:1b:da:e1:c1:c7:2d:80:
57:e3:f7:15:b9:7c:ae:55:c3:43:5a:7c:6f:4b:b9:ac:07:5e:
82:6e:f3:9e:1f:57:db:9b:78:87:0c:2f:64:1a:32:6f:0a:6f:
5e:d9:a1:4c:9a:c7:b3:3e:bf:05:7e:c4:a1:46:ac:b1:d2:e1:
67:b7:10:00:0d:4f:71:7e:9b:a0:4d:c6:d4:94:e5:8d:60:b4:
e7:a6:a9:ea:a1:4b:30:33:41:92:22:c6:fe:e3:91:3c:77:5a:
e0:c6:73:77:5b:fa:77:0d:2d:ac:a4:61:e2:79:d5:1f:96:0c:
92:e0:80:56:04:1f:55:79:ce:d9:c7:8e:57:90:66:b6:80:79:
e3:25:bf:c8:88:51:d5:63:0f:38:34:1a:71:cb:fc:7d:0d:c8:
f1:74:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:28 2025 by rpki-client